JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.236.22.252

172.236.22.252

Neutral Activity

268 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Linode

Usage Type

Data Center/Web Hosting/Transit

ASN

AS63949

Hostname(s)

172-236-22-252.ip.linodeusercontent.com

Domain Name

linode.com

Country

🇬🇧 United Kingdom of Great Britain and Northern Ireland

City

London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

172.236.22.252 has been reported 268 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 172.236.22.252:

This IP address has been reported a total of 268 times from 98 distinct sources. 172.236.22.252 was first reported on March 26th 2026, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 Agrohim	2026-06-26 00:38:42 (2 months ago)	Gate Inet blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇫🇷 sbocquet	2026-05-28 09:37:27 (3 months ago)	Port 443 scanned from 172.236.22.252:42926.	Port Scan
🇧🇷 chronos	2026-05-28 09:19:08 (3 months ago)	Web traffic. Possible probing or exploitation attempts. \| Port: 443 \| Proto: TCP \| Location: United ... show more Web traffic. Possible probing or exploitation attempts. \| Port: 443 \| Proto: TCP \| Location: United Kingdom, London show less	Exploited Host Brute-Force Web App Attack
Anonymous	2026-05-28 09:16:45 (3 months ago)	Unauthorized access (tcp/443/https)	Port Scan Web App Attack
🇬🇧 Andrew	2026-05-28 08:22:58 (3 months ago)	Blocked by UFW (TCP on port 80). Source port: 53298 TTL: 54 Packet length: 52 TOS: 0x00 This report ... show more Blocked by UFW (TCP on port 80). Source port: 53298 TTL: 54 Packet length: 52 TOS: 0x00 This report (for 172.236.22.252) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇫🇷 centurion	2026-05-28 08:14:54 (3 months ago)	Blocked by UFW on dc00 [80/tcp] Source port: 46554 TTL: 51 Packet length: 52 TOS: 0x00 This report ... show more Blocked by UFW on dc00 [80/tcp] Source port: 46554 TTL: 51 Packet length: 52 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇳🇴 tmiland	2026-05-28 07:48:04 (3 months ago)	Suricata Detected 6 attacks from 172.236.22.252.; ET CINS Active Threat Intelligence Poor Reputation ... show more Suricata Detected 6 attacks from 172.236.22.252.; ET CINS Active Threat Intelligence Poor Reputation IP group 252; IP: 172.236.22.252; Ports: 42332; Direction: to_server; Trigger: CINS; Category: Misc Attack; Severity: 2 show less	Brute-Force
🇮🇩 securejdprop	2026-05-28 07:35:14 (3 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET CINS Active Thr ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET CINS Active Threat Intelligence Poor Reputation IP group 251). Ip 172.236.22.252 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-05-28 07:35:12.01133166 +0000 UTC show less	Hacking Web App Attack
🇬🇧 Nov	2026-05-28 07:07:32 (3 months ago)	Unauthorized SSH access attempt (tcp/2222)	Port Scan SSH
🇩🇪 David Ferneding	2026-05-28 05:36:03 (3 months ago)	Blocked by UFW (TCP on 4840) Source port: 45295 TTL: 51 Packet length: 52 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 4840) Source port: 45295 TTL: 51 Packet length: 52 TOS: 0x00 This report (for 172.236.22.252) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇪🇸 el-brujo	2026-05-28 04:56:10 (3 months ago)	05/28/2026-06:56:09.951754 172.236.22.252 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputa ... show more 05/28/2026-06:56:09.951754 172.236.22.252 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 252 show less	Hacking
🇩🇪 Tamsweb	2026-05-28 04:21:02 (3 months ago)	Unauthorized connection attempt or scan from 172.236.22.252 on port 5671 ...	Port Scan
🇧🇷 diego	2026-05-28 03:57:57 (3 months ago)	[rede-168-134] 05/28/2026-00:57:57.475180, 172.236.22.252, Protocol: 6, ET CINS Active Threat Intell ... show more [rede-168-134] 05/28/2026-00:57:57.475180, 172.236.22.252, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 251 show less	Hacking
🇧🇷 diego	2026-05-28 03:10:18 (3 months ago)	[rede-top188] 05/28/2026-00:10:18.611960, 172.236.22.252, Protocol: 6, ET CINS Active Threat Intelli ... show more [rede-top188] 05/28/2026-00:10:18.611960, 172.236.22.252, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 251 show less	Hacking
🇬🇧 ISPLtd	2026-05-28 02:32:32 (3 months ago)	May 27 23:10:56 172.236.22.252 TCP SPT=58064 DPT=4840 SYN May 27 23:32:24 172.236.22.252 TCP SPT=539 ... show more May 27 23:10:56 172.236.22.252 TCP SPT=58064 DPT=4840 SYN May 27 23:32:24 172.236.22.252 TCP SPT=53950 DPT=10001 SYN May 27 23:32:31 172.236.22.252 TCP SPT=60240 DPT=2575 ... show less	Port Scan

Showing 1 to 15 of 268 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.77.161.44

🇬🇧 185.192.71.170

🇩🇪 167.94.146.38

🇨🇦 159.203.40.210

🇺🇸 104.23.209.68

🇮🇩 103.190.47.102

🇳🇱 89.21.67.152

🇺🇸 31.56.21.230

🇨🇦 16.54.251.6

🇸🇬 207.166.168.11

🇵🇱 193.34.213.196

🇨🇳 180.76.250.204

🇧🇷 172.71.163.146

🇺🇸 172.70.126.57

🇻🇳 172.68.165.133

🇿🇦 154.0.166.123

🇩🇪 135.125.235.107

🇵🇹 94.62.195.211

🇺🇸 92.71.43.100

🇮🇪 52.214.14.248